HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Vary: User-Agent, Accept-Encoding
Strict-Transport-Security: max-age = 31536000; includeSubDomains; preload
Content-Security-Policy: frame-ancestors 'self' 
Set-Cookie: headandshoulders_es#lang=es-ES; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=aftzkacpp35pz2ss3mnbqofe; path=/; secure; HttpOnly
X-Frame-Options: SAMEORIGIN
Set-Cookie: __CSRFCOOKIE=J0g3lVqWFefntlEt07MBZAAKeL7VvTuDGVHA59C5vjIPH2b8QcpO2sxcVVv8GpirwDVm40JU; path=/; secure; HttpOnly
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
X-Frames-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Server: SCCDH1
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Date: Mon, 10 Jun 2019 13:37:41 GMT
Set-Cookie: TS0112e387=019208dba6d320fba0fdb04ff90e120074a0748b6466df0ba7f2505ff32ee6c71c3d95536a4e60ed6eca21786f702adb09c916be5efa3cca26d81508724264b88ebb9b005ec405eae3748d8d1b82d0f0ba3695a8263ab143cad6f35a2200a011cd3fc57f5a; Path=/; Secure; HTTPOnly
Transfer-Encoding: chunked